$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ca7c5ac9-f072-383a-b4af-36c2f7cd99e2.roa File: ca7c5ac9-f072-383a-b4af-36c2f7cd99e2.roa (raw, json) Hash identifier: VRSeoxbnkBSL+Sj0/5vZb2condv7I+Ngc0Y1aYpD71s= Subject key identifier: 21:07:DE:F2:AE:5B:B2:CD:CE:DB:4D:41:1C:F5:83:09:60:49:24:2E Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584CA061A3AAB49700D8FC0F1AC0 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ca7c5ac9-f072-383a-b4af-36c2f7cd99e2.roa Signing time: Sat 24 Jan 2026 02:00:31 +0000 ROA not before: Sat 24 Jan 2026 02:00:31 +0000 ROA not after: Fri 24 Apr 2026 01:00:31 +0000 asID: 6363 IP address blocks: 2606:9fc0:d004::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a0:61:a3:aa:b4:97:00:d8:fc:0f:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Jan 24 02:00:31 2026 GMT Not After : Apr 24 01:00:31 2026 GMT Subject: CN=890eee8c-679a-4945-8e09-704cf5cb5c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c6:62:65:6c:e3:0c:a8:1b:e8:43:25:59:3b: ee:6a:18:43:5c:32:47:54:bb:9f:00:3d:f1:f3:6a: b9:45:26:03:3d:e0:12:8d:6a:f1:a9:11:8d:44:ee: d7:5a:1b:f6:77:99:d2:eb:60:02:9b:bf:06:3d:14: 0e:af:e2:d2:60:e7:60:c4:04:e8:26:a0:10:d6:dd: 69:94:a6:c0:08:2c:f2:91:5b:21:86:83:23:28:32: 86:c9:bd:a7:39:ce:84:92:67:79:0e:8d:58:51:18: 96:41:77:8b:3f:19:c8:a9:3e:61:1a:ec:a1:ef:38: 7b:66:e4:30:5f:57:d4:66:5c:ca:f3:ba:0c:e7:ef: 9e:43:e7:9a:ef:a1:f2:0b:aa:db:c3:5e:ee:fc:ce: 9b:11:7c:df:95:ea:67:01:d4:24:d6:50:4f:fa:35: ea:5d:36:72:4e:52:64:ba:99:e5:40:c9:06:32:47: 80:cf:cf:f6:20:ad:8a:24:2a:93:7e:ef:7c:a8:c7: 75:f4:24:b2:c8:75:cb:0c:22:46:b8:09:26:27:45: 12:5b:20:f6:e7:73:9c:5a:36:2a:39:8d:2c:3e:9e: 31:4d:ab:5a:35:cb:53:db:4c:f6:bf:f9:54:c1:84: dc:6b:fa:17:ac:92:cd:7c:b3:e5:c7:92:b6:c9:a9: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:07:DE:F2:AE:5B:B2:CD:CE:DB:4D:41:1C:F5:83:09:60:49:24:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ca7c5ac9-f072-383a-b4af-36c2f7cd99e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv6: 2606:9fc0:d004::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d0:19:af:d1:9b:68:38:35:24:28:bd:01:d9:bf:57:a2:4e: e6:26:cc:53:47:73:e4:9d:0f:15:50:00:33:44:4d:7e:76:20: 37:09:32:5c:b3:3e:af:8b:c8:12:48:3e:f0:4a:6e:cc:bd:02: 85:fa:13:d7:e8:98:a2:d2:11:21:41:18:a6:ef:fb:ed:dc:69: 31:38:37:d7:03:d7:36:eb:8a:27:51:fc:85:25:13:fe:dc:a3: 5d:f7:89:9c:70:19:c2:fb:25:d3:ce:10:1a:ab:96:fc:56:ca: 99:13:1a:61:04:fe:5d:18:10:37:38:cc:44:dd:39:4b:6f:55: 32:dd:b7:5f:cc:53:ce:ca:bf:f8:32:9a:b1:86:74:51:98:a7: b4:64:6f:53:47:30:fe:9e:22:36:1d:ae:9e:ba:39:60:ad:0f: aa:27:47:75:97:d8:e4:d1:37:9f:77:27:3c:b4:45:ef:74:24: eb:2b:f6:5b:b9:86:1e:ba:76:78:d8:09:bb:a4:12:e6:ab:f7: d6:d7:bf:7b:20:ec:fe:43:5d:78:83:9a:89:7f:9a:62:df:5f: 48:af:97:11:ce:00:94:9c:94:e7:8e:d7:b4:f9:ed:69:4e:41: 98:6d:22:bd:6f:9f:d5:7b:d9:59:71:cf:9a:34:c3:7b:35:ec: 0e:35:64:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEygYaOqtJcA2PwPGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDEyNDAyMDAzMVoXDTI2MDQyNDAxMDAzMVowLzEtMCsGA1UEAxMk ODkwZWVlOGMtNjc5YS00OTQ1LThlMDktNzA0Y2Y1Y2I1YzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisZiZWzjDKgb6EMlWTvuahhDXDJHVLufAD3x 82q5RSYDPeASjWrxqRGNRO7XWhv2d5nS62ACm78GPRQOr+LSYOdgxAToJqAQ1t1p lKbACCzykVshhoMjKDKGyb2nOc6Ekmd5Do1YURiWQXeLPxnIqT5hGuyh7zh7ZuQw X1fUZlzK87oM5++eQ+ea76HyC6rbw17u/M6bEXzflepnAdQk1lBP+jXqXTZyTlJk upnlQMkGMkeAz8/2IK2KJCqTfu98qMd19CSyyHXLDCJGuAkmJ0USWyD253OcWjYq OY0sPp4xTataNctT20z2v/lUwYTca/oXrJLNfLPlx5K2yakxLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCEH3vKuW7LNzttNQRz1gwlgSSQuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvY2E3YzVhYzktZjA3Mi0z ODNhLWI0YWYtMzZjMmY3Y2Q5OWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgafwNAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADvQGa/Rm2g4NSQovQHZv1eiTuYmzFNHc+SdDxVQADNETX52IDcJ MlyzPq+LyBJIPvBKbsy9AoX6E9fomKLSESFBGKbv++3caTE4N9cD1zbriidR/IUl E/7co133iZxwGcL7JdPOEBqrlvxWypkTGmEE/l0YEDc4zETdOUtvVTLdt1/MU87K v/gymrGGdFGYp7Rkb1NHMP6eIjYdrp66OWCtD6onR3WX2OTRN593Jzy0Re90JOsr 9lu5hh66dnjYCbukEuar99bXv3sg7P5DXXiDmol/mmLfX0ivlxHOAJSclOeO17T5 7WlOQZhtIr1vn9V72Vlxz5o0w3s17A41ZHc= -----END CERTIFICATE-----Generated at Mon Mar 2 09:21:00 2026 by rpki-client